Overview

overview

5

Static

static

5

kpt-PhotoL...kg.exe

windows7-x64

3

kpt-PhotoL...kg.exe

windows10-2004-x64

3

photolab.exe

windows7-x64

3

photolab.exe

windows10-2004-x64

3

readme.rtf

windows7-x64

4

readme.rtf

windows10-2004-x64

1

Лицензия.rtf

windows7-x64

4

Лицензия.rtf

windows10-2004-x64

1

Прогр...о.pdf

windows7-x64

3

Прогр...о.pdf

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    KPT-PHOTOLAB259B_FULL_INCL_FIX_KG.RAR

  • Size

    1.6MB

  • MD5

    a41bc7c8f2dae869ae778599bcdc2930

  • SHA1

    644a14b6589cb60ffcfe8f4d3d2c787b046dd8cf

  • SHA256

    e784c79005bd600f66bb106f3f200aeff6d395134ad9b3b2db14a3186ff44f75

  • SHA512

    c644522ba42b56d8da5611f8de7b8d680d9286febb2c103aee503d1862419bd3ffdcc0b302bccb8389df045d67e8c0e0d16a2da2c969447db084b649d62a79ca

  • SSDEEP

    24576:tE8pehpuBjP51oF223OxHkVrwh5XlfT4Jqc0QYHrV6n+Wt9zdX/90:LehpM1aoEVYplfTrBrV6n3FX/W

Score
5/10
pdf

Malware Config

Signatures

  • Malformed data in PDF

    A PDF can contain malformed data to evade detection

    pdf
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • KPT-PHOTOLAB259B_FULL_INCL_FIX_KG.RAR
    .rar
  • FILE_ID.DIZ
  • KpT.nfo
  • PhotoLab.tps
  • Smartvsd.vxd
  • formats.ini
  • history.txt
  • kpt-PhotoLab259b_fix_kg.rar
    .rar
  • FILE_ID.DIZ
  • KpT.nfo
  • kpt-PhotoLab259b_fix_kg.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • photolab.cnt
  • photolab.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • photolab.hlp
  • readme.rtf
    .rtf
  • Лицензия.doc
    .rtf .doc
  • Программное руководство.pdf
    .pdf